Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145531.roa
File: AS145531.roa (raw, json)
Hash identifier: BoQ19DENzw4H4pvmMa/0l9V6jzNXORmd8gHaqiXCDug=
Subject key identifier: 52:39:1B:10:2D:20:AB:35:6B:6C:98:C9:3F:79:67:D3:3E:C2:AC:37
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6AB889B5B0E098E8CF71B706B67378EFCB2B4177
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145531.roa
Signing time: Fri 22 May 2026 02:47:34 +0000
ROA not before: Fri 22 May 2026 02:42:34 +0000
ROA not after: Fri 21 May 2027 02:47:34 +0000
asID: 145531
IP address blocks: 240a:ab41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b8:89:b5:b0:e0:98:e8:cf:71:b7:06:b6:73:78:ef:cb:2b:41:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:34 2026 GMT
Not After : May 21 02:47:34 2027 GMT
Subject: CN=52391B102D20AB356B6C98C93F7967D33EC2AC37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:5d:4a:c6:5f:5a:2b:a3:f6:b2:73:61:d8:
0d:a2:90:36:98:e5:28:7b:0b:4b:36:89:b4:21:95:
11:ba:0a:7a:e0:99:e7:d5:8f:d0:7a:71:ef:54:8f:
4b:86:5d:f1:c4:e2:04:6d:60:9a:f8:db:0c:0b:06:
c8:38:1d:0f:3c:5b:de:6d:77:9e:43:88:ce:eb:84:
1f:b3:42:ca:c1:90:b7:51:63:1b:4d:5f:1a:4b:58:
30:a4:09:84:4e:c7:1d:b2:67:32:1f:ee:d5:6d:fa:
f0:14:72:b9:e0:9e:bf:a2:63:4f:56:d9:ae:87:60:
9f:89:c4:4a:dc:18:b6:98:b6:f9:05:17:27:cc:8e:
be:84:76:59:68:0b:5c:5d:3e:40:61:ee:39:3d:14:
d8:00:a5:5b:8f:d4:f2:27:38:ba:9a:d2:34:0c:00:
bf:a2:d1:11:cf:2a:7a:39:ac:96:2a:0f:f9:4e:69:
7e:fa:6f:74:94:4a:80:29:7b:e6:a8:dc:f9:cc:d4:
44:d3:98:f8:9f:b8:86:ed:4e:38:5e:37:76:ec:45:
17:06:34:f8:e9:39:b4:84:d4:63:92:22:91:76:3b:
89:72:bd:2f:a0:48:db:1e:56:f0:3d:4c:81:0f:ab:
63:01:a9:92:84:77:ff:df:72:e0:b1:81:9c:5a:31:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:39:1B:10:2D:20:AB:35:6B:6C:98:C9:3F:79:67:D3:3E:C2:AC:37
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab41::/32
Signature Algorithm: sha256WithRSAEncryption
bd:ca:d5:fc:05:4f:d0:53:9c:c3:5e:ae:3d:d8:d9:0a:27:5b:
ad:0e:d5:99:cd:39:1b:b8:70:8f:10:88:ee:81:7e:b4:f0:67:
0c:99:90:aa:53:70:0a:78:c2:7d:d8:ae:f9:60:9d:8a:a8:cf:
25:c3:31:d7:b2:65:45:7b:d9:c1:a7:87:bb:9c:f4:ec:77:c1:
98:7e:ae:58:0a:57:12:5f:e1:1e:e6:f1:c9:0c:48:c6:ce:ad:
95:5c:06:c3:d3:6a:94:a7:4b:78:77:4e:92:77:31:04:01:3e:
3b:c5:9d:f2:07:5f:f1:a4:fc:39:e4:bd:71:c7:35:25:b0:4e:
bc:c8:b8:f9:11:75:57:22:06:6f:3a:1c:85:fb:27:8b:61:c7:
fb:12:af:ff:a4:9a:66:2a:38:ec:66:a3:6c:b8:99:2d:24:f7:
76:61:91:66:11:60:39:50:cf:76:35:1a:4c:f0:46:22:2d:04:
13:ea:b3:91:81:fc:5c:0d:54:08:ac:da:2d:d4:3a:43:f6:39:
61:5d:cd:1b:cf:76:f4:83:3e:c3:86:6c:64:a0:c2:2b:df:41:
b1:1b:26:03:ae:38:94:e6:47:e7:c0:d2:51:3f:e3:e9:94:85:
b0:1d:43:01:cf:42:7c:ee:21:8a:0b:d1:6b:20:1c:54:96:c3:
28:47:26:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:42 2026 by rpki-client